Exploração pública

Catálogo de exploits

Todo exploit público que catalogamos, num índice só. Busque por CVE, nome do exploit ou tecnologia — e veja, ao lado, o que a falha realmente vale: severidade, probabilidade de exploração e se já está sob ataque.

77.231exploits catalogados

35.420CVEs com exploração pública

24.695testados em laboratório

Todos Exploit-DB 24.451Referência 22.266GitHub PoC 14.131VulnCheck XDB 8.635Nuclei 4.274Metasploit 3.474✓ só verificadosrecentes populares risco

22.266 exploits

Referência

CVE-2010-1047

CVE-2010-1047—

SQL injection vulnerability in index.php in MASA2EL Music City 1.0 and 1.1 allows remote attackers to execute arbitrary

23RISCO

abrir ↗

Referência

CVE-2010-0945

CVE-2010-0945—

SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2010-0945

CVE-2010-0945—

SQL injection vulnerability in the HotBrackets Tournament Brackets (com_hotbrackets) component for Joomla! allows remote

23RISCO

abrir ↗

Referência

CVE-2017-15963

CVE-2017-15963—

iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser pa

23RISCO

abrir ↗

Referência✓ VexDay Proof

WebCMS Portal Edition - 'id' SQL Injection

CVE-2008-3213—webappsphp

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute a

23RISCO

abrir ↗

Referência

CVE-2017-15964

CVE-2017-15964—

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

23RISCO

abrir ↗

Referência

CVE-2017-15964

CVE-2017-15964—

Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

23RISCO

abrir ↗

Referência

CVE-2010-4937

CVE-2010-4937—

Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to ex

23RISCO

abrir ↗

Referência

CVE-2010-2674

CVE-2010-2674—

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2674

CVE-2010-2674—

SQL injection vulnerability in index.php in TSOKA:CMS 1.1, 1.9, and 2.0 allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência

CVE-2010-2255

CVE-2010-2255—

SQL injection vulnerability in the BF Survey Pro (com_bfsurvey_pro) component before 1.3.1, BF Survey Pro Free (com_bfsu

23RISCO

abrir ↗

Referência✓ VexDay Proof

Affiliate Directory - 'id' SQL Injection

CVE-2008-3719—webappsphp

SQL injection vulnerability in directory.php in SFS Affiliate Directory allows remote attackers to execute arbitrary SQL

23RISCO

abrir ↗

Referência✓ VexDay Proof

AstroSPACES 1.1.1 - 'id' SQL Injection

CVE-2008-4642—webappsphp

SQL injection vulnerability in profile.php in AstroSPACES 1.1.1 allows remote attackers to execute arbitrary SQL command

23RISCO

abrir ↗

Referência✓ VexDay Proof

Jamit Job Board 3.x - Blind SQL Injection

CVE-2008-5295—webappsphp

SQL injection vulnerability in index.php in Jamit Job Board 3.4.10 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência✓ VexDay Proof

The Classified Ad System 1.0 - 'main' SQL Injection

CVE-2006-6349—webappsasp

Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute ar

23RISCO

abrir ↗

Referência✓ VexDay Proof

F-Prot AntiVirus 4.6.6 - 'ACE' Denial of Service

CVE-2006-6352—doslinux

FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinit

23RISCO

abrir ↗

Referência✓ VexDay Proof

E-topbiz Number Links 1 - 'id' SQL Injection

CVE-2008-5804—webappsphp

SQL injection vulnerability in admin/admin_catalog.php in e-topbiz Number Links 1 Php Script allows remote attackers to

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component PAX Gallery 0.1 - Blind SQL Injection

CVE-2008-5811—webappsphp

SQL injection vulnerability in the PaxGallery (com_paxgallery) component 0.1 for Joomla! allows remote attackers to exec

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Auction - Blind SQL Injection

CVE-2008-6778—webappsphp

SQL injection vulnerability in viewfaqs.php in Scripts for Sites (SFS) EZ Auction allows remote attackers to execute arb

23RISCO

abrir ↗

Referência✓ VexDay Proof

SFS EZ Pub Site - SQL Injection

CVE-2008-6794—webappsphp

SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Pub Site allows remote attackers to execute a

23RISCO

abrir ↗

Referência✓ VexDay Proof

Joomla! Component live chat - SQL Injection / Open Proxy

CVE-2008-6883—webappsphp

SQL injection vulnerability in the Live Chat (com_livechat) component 1.0 for Joomla! allows remote attackers to execute

23RISCO

abrir ↗

Referência✓ VexDay Proof

ASPReferral 5.3 - 'AccountID' Blind SQL Injection

CVE-2008-6889—webappsasp

SQL injection vulnerability in Merchantsadd.asp in ASPReferral 5.3 allows remote attackers to execute arbitrary SQL comm

23RISCO

abrir ↗

Referência

CVE-2010-0764

CVE-2010-0764—

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands v

23RISCO

abrir ↗

Referência

CVE-2010-1661

CVE-2010-1661—

Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQ

23RISCO

abrir ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISCO

abrir ↗

Referência

CVE-2010-1468

CVE-2010-1468—

SQL injection vulnerability in the Multi-Venue Restaurant Menu Manager (aka MVRMM or com_mv_restaurantmenumanager) compo

23RISCO

abrir ↗

Referência

CVE-2008-6277

CVE-2008-6277—

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script (aka Shopping Cart) allows remote at

23RISCO

abrir ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISCO

abrir ↗

Referência

CVE-2010-1654

CVE-2010-1654—

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote

23RISCO

abrir ↗

Referência

CVE-2017-15969

CVE-2017-15969—

PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_cata

23RISCO

abrir ↗

Indexamos apenas o link público para a prova de conceito — nunca hospedamos nem redistribuímos código de exploração. Fontes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit e VulnCheck XDB. A existência de PoC pública não significa que a falha seja explorável no seu ambiente.